Guidelines on Ceasing the use of NRIC Numbers for Authentication
2 February 2026 | Patient Records & Privacy | MOH MHC Cir 0001/2026
Summary
1. Purpose & Policy Change
MOH has issued guidelines for healthcare practitioners and licensees to cease using National Registration Identity Card (NRIC) numbers as primary patient identifiers in health records and systems. Transition to alternative identifiers to enhance privacy and data security.
2. Background & Rationale
- NRIC numbers constitute sensitive personally identifiable information
- Excessive use increases data breach risks
- International best practice recommends limiting PII use to essential purposes only
- Alternative identification systems provide adequate patient identification for healthcare purposes
3. Implementation Requirements
- Phase Out NRIC Usage: Remove NRIC numbers from routine clinical documentation where possible
- Alternative Identifiers: Use patient-assigned clinic ID or medical record numbers as primary identifier
- Existing Records: Not required to retroactively remove from historical records; process new records without NRIC
- System Updates: Modify patient registration and IT systems to minimize NRIC capture
- Staff Training: Educate on new identification procedures
4. Exceptions & Limited Use Cases
- Legal/regulatory requirements (specific Ministry requests with authorization)
- Insurance claims processing (where mandatory by policy)
- Prescription and medication safety verification
- Report these limited uses in compliance documentation
5. Timeline & Compliance
New records should implement guidelines immediately. Existing systems have phased transition period. MOH will audit compliance and integration across healthcare organizations.
Action Items: Audit NRIC usage in systems; plan IT modifications; train staff on alternatives; update forms and templates.
Copy for WhatsApp / Telegram
𝟭. 𝗣𝘂𝗿𝗽𝗼𝘀𝗲 & 𝗣𝗼𝗹𝗶𝗰𝘆 𝗖𝗵𝗮𝗻𝗴𝗲
MOH has issued guidelines for healthcare practitioners and licensees to cease using National Registration Identity Card (NRIC) numbers as primary patient identifiers in health records and systems. Transition to alternative identifiers to enhance privacy and data security.
𝟮. 𝗕𝗮𝗰𝗸𝗴𝗿𝗼𝘂𝗻𝗱 & 𝗥𝗮𝘁𝗶𝗼𝗻𝗮𝗹𝗲
• NRIC numbers constitute sensitive personally identifiable information • Excessive use increases data breach risks • International best practice recommends limiting PII use to essential purposes only • Alternative identification systems provide adequate patient identification for healthcare purposes
𝟯. 𝗜𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁𝗮𝘁𝗶𝗼𝗻 𝗥𝗲𝗾𝘂𝗶𝗿𝗲𝗺𝗲𝗻𝘁𝘀
• Phase Out NRIC Usage: Remove NRIC numbers from routine clinical documentation where possible • Alternative Identifiers: Use patient-assigned clinic ID or medical record numbers as primary identifier • Existing Records: Not required to retroactively remove from historical records; process new records without NRIC • System Updates: Modify patient registration and IT systems to minimize...
𝟰. 𝗘𝘅𝗰𝗲𝗽𝘁𝗶𝗼𝗻𝘀 & 𝗟𝗶𝗺𝗶𝘁𝗲𝗱 𝗨𝘀𝗲 𝗖𝗮𝘀𝗲𝘀
• Legal/regulatory requirements (specific Ministry requests with authorization) • Insurance claims processing (where mandatory by policy) • Prescription and medication safety verification • Report these limited uses in compliance documentation
Documents
Circular
Annexes